CompTIA Security+ SY0-601 Exam Cram, 6th Edition

Chapter 34

Risk Management

This chapter covers the following official Security+ exam objective:

• ▶ 5.4 Summarize risk management processes and concepts.

Essential Terms and Components

• ▶ risk acceptance

• ▶ risk avoidance

• ▶ risk transference

• ▶ risk mitigation

• ▶ risk register

• ▶ risk matrix/risk heat map

• ▶ risk assessment

• ▶ risk awareness

• ▶ risk appetite

• ▶ qualitative risk assessment

• ▶ quantitative risk assessment

• ▶ single loss expectancy (SLE)

• ▶ annualized loss expectancy (ALE)

• ▶ annualized rate of occurrence (ARO)

• ▶ business impact analysis (BIA)

• ▶ recovery time objective (RTO)

• ▶ recovery point objective (RPO)

• ▶ mean time to repair (MTTR)

• ▶ mean time between failures (MTBF)

• ▶ single point of failure

Risk Analysis

Risk is the possibility ...